This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer File: 5TfQw0j9fcSfX8OwBmoxxYT64as.cer (raw, json) Hash identifier: 80OPOLDu2VQM0TL3uQN+08WQ6kbbm+L/DF/q0utdrS0= Subject key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028648 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 14 Jan 2026 14:13:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 17471 IP: 103.7.112.0/22 IP: 122.99.96.0/21 IP: 202.125.64.0/20 IP: 203.83.160.0/19 IP: 203.191.32.0/23 IP: 2407:f040::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165448 (0x28648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 14 14:13:52 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ec:b6:53:ab:05:9b:de:54:2b:74:a9:46:2c: d1:d3:14:9c:64:6a:ef:76:b8:a5:11:f7:7e:02:9c: 47:5b:61:62:ae:ae:3d:9c:83:65:73:d9:5c:c4:ce: bc:f4:31:62:91:d4:78:ae:0d:24:ed:3f:d1:24:02: 67:a2:7f:f2:f3:66:f0:d5:12:32:bf:f0:85:d0:ab: 39:31:26:a2:01:50:5d:c0:c0:91:b9:03:5c:b4:51: 58:2f:42:a7:40:d9:1a:9b:ce:15:24:3d:f1:db:bc: 98:1e:56:d1:e2:31:bd:15:78:14:15:52:a7:ca:f5: 3e:61:cb:c3:cc:d9:38:40:38:83:a7:ce:53:0a:56: 64:a5:9a:1a:40:aa:52:71:da:3d:b4:f8:8d:22:44: 4e:94:54:a8:f4:17:d3:54:0c:e3:5b:1c:d0:5d:0b: 0c:4e:56:dd:bb:f3:b2:c5:e6:65:0b:9a:89:26:61: 65:24:d7:c0:90:ad:0b:e0:11:a6:a4:08:06:01:f8: 45:4f:77:77:70:47:26:87:90:9e:81:96:29:7d:ef: b9:5d:9d:8d:e8:83:6d:ea:a0:37:48:6e:9a:ce:4f: 45:f9:8b:d1:25:87:7c:48:39:d3:b0:7e:5e:a8:a2: 74:52:d2:0e:bf:48:3a:75:79:91:9c:39:66:4a:df: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17471 sbgp-ipAddrBlock: critical IPv4: 103.7.112.0/22 122.99.96.0/21 202.125.64.0/20 203.83.160.0/19 203.191.32.0/23 IPv6: 2407:f040::/32 Signature Algorithm: sha256WithRSAEncryption 90:fb:5e:56:48:81:87:f2:be:79:2c:71:d9:ba:00:47:17:3a: 91:ac:3b:b5:2a:aa:6b:8d:37:3a:87:6b:e7:de:e0:f0:f5:98: dc:80:65:9b:87:52:9a:4c:b7:c8:11:d0:ed:4c:af:a9:b2:d0: 75:5f:ee:92:43:1b:0a:65:fa:5b:64:b1:25:04:fa:2a:32:9b: 57:87:67:76:64:29:98:70:df:79:d3:23:c5:00:30:f2:c4:46: de:ea:6b:3a:e3:a7:42:a5:16:4f:11:ad:36:d0:ee:18:de:5e: ea:1d:2a:eb:f7:ae:8b:1d:07:3a:7b:a9:0d:80:61:10:13:33: 5e:81:dc:30:e2:38:81:57:d3:dd:f0:75:da:1a:ec:fb:a9:ca: 0c:0a:8f:e9:0a:49:b3:0c:6e:25:4b:1a:55:a1:d3:1f:65:3f: 24:ce:fd:43:18:15:9a:1c:dc:45:da:78:19:14:aa:6d:f5:aa: 2e:26:6e:16:89:4c:96:60:3d:11:53:dc:f3:fc:46:d7:43:61: 73:cc:ef:1e:5f:a4:3c:ab:6c:1a:7b:38:17:95:e0:3c:44:4b: 62:8a:dd:68:73:28:ab:82:c9:e1:8a:59:3b:0a:01:f2:f9:28: 3b:86:5f:ee:d5:2c:32:ce:1e:67:96:c4:e7:d5:28:0c:e5:b3: 90:de:b7:a1 -----BEGIN CERTIFICATE----- MIIGQDCCBSigAwIBAgIDAoZIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNDE0MTM1MloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNC MDA2NkEzMUM1ODRGQUUxQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg7LZTqwWb3lQrdKlGLNHTFJxkau92uKUR934CnEdbYWKurj2cg2Vz2VzEzrz0 MWKR1HiuDSTtP9EkAmeif/LzZvDVEjK/8IXQqzkxJqIBUF3AwJG5A1y0UVgvQqdA 2RqbzhUkPfHbvJgeVtHiMb0VeBQVUqfK9T5hy8PM2ThAOIOnzlMKVmSlmhpAqlJx 2j20+I0iRE6UVKj0F9NUDONbHNBdCwxOVt2787LF5mULmokmYWUk18CQrQvgEaak CAYB+EVPd3dwRyaHkJ6Blil977ldnY3og23qoDdIbprOT0X5i9Elh3xIOdOwfl6o onRS0g6/SDp1eZGcOWZK33AFAgMBAAGjggM1MIIDMTAdBgNVHQ4EFgQU5TfQw0j9 fcSfX8OwBmoxxYT64aswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ0MzQ1L0VDNzhDRERBMDUzODExRUFCNTg5NzY2OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFENDM0NS9FQzc4Q0REQTA1MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBq OWZjU2ZYOE93Qm1veHhZVDY0YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICRD8wRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAJnB3ADBAN6Y2AD BATKfUADBAXLU6ADBAHLvyAwDQQCAAIwBwMFACQH8EAwDQYJKoZIhvcNAQELBQAD ggEBAJD7XlZIgYfyvnkscdm6AEcXOpGsO7UqqmuNNzqHa+fe4PD1mNyAZZuHUppM t8gR0O1Mr6my0HVf7pJDGwpl+ltksSUE+ioym1eHZ3ZkKZhw33nTI8UAMPLERt7q azrjp0KlFk8RrTbQ7hjeXuodKuv3rosdBzp7qQ2AYRATM16B3DDiOIFX093wddoa 7PupygwKj+kKSbMMbiVLGlWh0x9lPyTO/UMYFZoc3EXaeBkUqm31qi4mbhaJTJZg PRFT3PP8RtdDYXPM7x5fpDyrbBp7OBeV4DxES2KK3WhzKKuCyeGKWTsKAfL5KDuG X+7VLDLOHmeWxOfVKAzls5Det6E= -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:44 2026 by rpki-client